PT-2008-2873 · Argon Technology · Argon Technology Client Management Services+1

Luigi Auriemma

·

Publicado

2008-03-10

·

Atualizado

2018-10-11

·

CVE-2008-1281

CVSS v2.0

5.0

Média

VetorAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Argon Technology Client Management Services (CMS) versions 1.31 and earlier TFTPsrvs.exe versions 2.5.3.1 and earlier
Description A directory traversal issue allows remote attackers to read arbitrary files by including a .. (dot dot) in the filename parameter.
Recommendations For Argon Technology Client Management Services (CMS) versions 1.31 and earlier, update to a version later than 1.31. For TFTPsrvs.exe versions 2.5.3.1 and earlier, update to a version later than 2.5.3.1. As a temporary workaround, consider restricting access to the filename parameter to minimize the risk of exploitation.

Exploit

Correção

Path traversal

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2008-1281

Produtos afetados

Argon Technology Client Management Services
Tftpsrvs.Exe